Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/0Yj6-DNqqtf1K9BTz-4wP5ci7Vc.roa
File:                     0Yj6-DNqqtf1K9BTz-4wP5ci7Vc.roa (raw, json)
Hash identifier:          kZRZIAl+umDJVFttbmUZz03X16+tnlLeWcbLLpLqbLM=
Subject key identifier:   D1:88:FA:F8:33:6A:AA:D7:F5:2B:D0:53:CF:EE:30:3F:97:22:ED:57
Certificate issuer:       /CN=16fe0d024cddbaf868229122158971472b24cb4d
Certificate serial:       07972AC6
Authority key identifier: 16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/0Yj6-DNqqtf1K9BTz-4wP5ci7Vc.roa
Signing time:             Sat 01 Jan 2022 06:03:46 +0000
ROA not before:           Sat 01 Jan 2022 06:03:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57048
IP address blocks:        2a0e:f7c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127347398 (0x7972ac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16fe0d024cddbaf868229122158971472b24cb4d
        Validity
            Not Before: Jan  1 06:03:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d188faf8336aaad7f52bd053cfee303f9722ed57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:68:37:86:f7:52:e3:b8:9c:1d:d4:84:93:
                    33:03:bc:02:01:78:a1:a5:e6:4c:1b:63:79:a0:30:
                    6b:fb:b4:11:bd:06:19:93:2a:c8:a9:ba:f1:a7:da:
                    4b:c5:4e:bd:a6:db:fc:e1:32:d5:6c:a7:55:d6:3a:
                    d1:d9:86:68:e6:32:49:bf:0c:e7:3c:3e:4a:7d:40:
                    3f:de:8d:24:a3:65:92:e3:8e:ec:67:66:f1:cb:3a:
                    ae:9e:b4:85:0f:b7:00:54:f2:ba:fb:5f:73:a0:cd:
                    44:94:83:df:48:64:de:f6:c9:a6:d6:5a:38:ef:d8:
                    89:71:19:14:f5:e3:e5:cb:cc:28:0b:02:9d:b4:40:
                    f2:1b:cd:f0:2e:b9:12:88:25:b6:12:e0:fe:38:57:
                    08:00:6c:17:37:9b:50:bb:4e:d6:45:a2:e6:be:01:
                    29:9c:63:72:22:97:6f:36:07:64:f5:9a:9a:f7:74:
                    6a:3b:ae:a8:27:eb:1d:93:8f:b6:8e:d0:7c:91:c0:
                    d9:a3:09:b1:1c:7e:60:46:80:fd:8d:51:09:da:47:
                    9e:8d:df:f6:1f:57:0b:22:80:bf:e7:71:ac:a8:fc:
                    28:7c:f3:ca:42:ba:42:69:99:f7:25:7a:61:ce:b2:
                    d7:a8:4a:5f:44:c0:53:15:8a:87:03:2a:1f:a2:e2:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:88:FA:F8:33:6A:AA:D7:F5:2B:D0:53:CF:EE:30:3F:97:22:ED:57
            X509v3 Authority Key Identifier:
                keyid:16:FE:0D:02:4C:DD:BA:F8:68:22:91:22:15:89:71:47:2B:24:CB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fv4NAkzduvhoIpEiFYlxRysky00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/0Yj6-DNqqtf1K9BTz-4wP5ci7Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4616d7-e808-4e47-a646-5b2f90df796d/1/Fv4NAkzduvhoIpEiFYlxRysky00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:f7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:da:47:ca:b2:1d:88:e3:7d:9d:67:70:45:73:f6:97:2b:
         01:de:b4:f4:2a:19:9f:66:e4:be:62:65:16:51:9b:7e:1e:83:
         bc:2b:db:a3:e4:04:61:0d:39:1a:e8:fa:b8:27:ee:06:ca:e3:
         22:48:de:f9:b1:8b:2c:6f:d9:1f:97:01:11:8c:c0:f6:1b:23:
         ad:31:d2:71:38:fb:bb:cf:f3:6d:bb:ba:04:cd:3a:01:f6:07:
         7f:a8:b1:b0:c1:ba:89:ae:f3:ba:37:b1:8d:99:a5:bf:1b:c8:
         c6:df:57:8c:04:e4:ce:5a:bd:66:50:3b:84:a9:1e:f7:26:8c:
         58:ec:11:a1:b4:de:97:12:c2:c6:51:09:6f:89:9b:d6:24:84:
         5f:ea:e6:b5:0a:d6:f9:40:0a:95:dd:15:e7:ac:96:8a:b7:a0:
         24:8e:fb:80:91:c9:54:43:f8:f4:4e:7e:0e:29:79:06:e1:db:
         b2:23:ca:83:1e:1c:1f:bc:b2:7c:37:ac:38:23:4b:95:64:f2:
         d0:db:f2:6d:66:93:06:4b:4b:6e:58:1f:91:b1:bd:d2:93:46:
         ac:6f:c1:dc:e1:13:a0:a5:8f:a2:5e:af:c6:ca:96:ed:c7:c3:
         68:1a:3c:9f:9e:96:b7:29:e1:9a:90:40:d0:9a:37:10:ad:0e:
         44:0e:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----